Render an account or a role inactive as shown here.
You must bind as the Directory Manager.
You cannot use DSCC to perform this task. Use the command line, as described in this procedure.
Use the ns-inactivate command to render the account or role inactive.
The following command renders Barbara Jensen's account inactive:
$ ns-inactivate -D "cn=Directory Manager" -j pwd.txt \ -I uid=bjensen,ou=people,dc=example,dc=com uid=bjensen,ou=people,dc=example,dc=com inactivated. $
See the ns-inactivate(1M) man page for details.